step-agent

by Smallstep Labs, LLCv0.65.4

Smallstep.step-agent

Last updated Apr 29, 2026

Device identity and certificate management daemon.

Install with winget

$ winget install --id Smallstep.step-agent --exact --version 0.65.4

Run in Command Prompt, PowerShell, or Windows Terminal. Prompts for any agreements.

Stop chasing app updates. Pckgr patches them for you.

Automated application patching for Microsoft Intune. Pckgr keeps a curated library of 1,000+ apps continuously up-to-date in your tenant via Microsoft Graph — no manual repackaging, no chasing vendor sites.

See Pckgr's app library

About

The Smallstep agent is a cross-platform daemon that enrolls devices,

performs cryptographic device attestation (TPM, cloud, OS keystore),

and manages X.509 and SSH certificate lifecycle for endpoints

managed by the Smallstep platform.

Installers · v0.65.4

Architecture	Type	Scope	Install	Download
x64	wix	-		Direct
arm64	wix	-		Direct

Copy a command tailored to that specific architecture, type, and scope - useful when winget would otherwise pick a different default.

Related apps

DPIBreakDilluti0n
Dilluti0n.DPIBreakv0.6.1
Fast and easy-to-use DPI circumvention tool in Rust
S
stepSmallstep
Smallstep.stepv0.30.2
A Swiss army knife for working with X.509 certificates, JWTs, etc.
Windows Admin Center (v2)Microsoft Corporation
Microsoft.WindowsAdminCenterv2.6.6.18
A customer-deployed, browser-based app for managing servers, clusters, hyper-converged infrastructure, and Windows 10/11 PCs. It comes at no additional cost beyond Windows and is ready to use in production.
FireDaemon LozengeFireDaemon Technologies Limited
FireDaemon.FireDaemonLozengev3.1.3
Your lozenge for everyday cryptographic tasks - Compute multiple hashes for files, Create self-signed certificates, Generate Certificate Signing Requests.
RemotlyMirillis Ltd.
MirillisLtd.Remotlyv1, 36, 2, 0
Secure, high-performance remote desktop software
CertAid for WindowsMIT IS&T
MIT.CertAidv2.2.6.0
CertAid manages the entire MIT personal certificate setup procedure, giving users a more reliable installation experience. It installs the certificates which identify MIT users to various protected sites.

Frequently asked questions

How do I install step-agent on Windows?

Open Windows Terminal, PowerShell, or Command Prompt and run: winget install --id Smallstep.step-agent --exact --version 0.65.4. winget downloads the installer from Smallstep Labs, LLC and runs it. Requires Windows 10 (1809+) or Windows 11.

How do I install step-agent silently for unattended deployment?

Add --silent and accept the agreements upfront: winget install --id Smallstep.step-agent --exact 0.65.4 --silent --accept-package-agreements --accept-source-agreements. This is the variant Intune, Configuration Manager, and other deployment tools should use.

How do I uninstall step-agent via winget?

Run: winget uninstall --id Smallstep.step-agent --exact. Add --silent for unattended uninstalls. winget will use the registered uninstaller from step-agent's Apps & Features entry.

Is step-agent free?

step-agent is distributed under Proprietary. Refer to the publisher (https://smallstep.com/docs/platform/smallstep-agent) for the full license terms - Wingetly itself does not charge for installation.

Does step-agent work on Windows 10?

Yes, as long as your Windows 10 build supports winget (1809 or newer). winget ships with App Installer on Windows 10/11 and pulls step-agent directly from the publisher.

How do I keep step-agent up to date?

Run winget upgrade --id Smallstep.step-agent --exact, or winget upgrade --all to update everything winget tracks. We index 1 version of step-agent from microsoft/winget-pkgs.